Security audit
Vauxr
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently connects OpenClaw to Vauxr voice devices and its device-control powers are disclosed and purpose-aligned.
Install only if you trust the Vauxr server and token you configure. Be deliberate with vauxr_control because it can reboot devices or trigger OTA updates, and avoid broad alsoAllow entries unless you want voice-originated sessions to gain those extra tools.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.